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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A method for controlling subscriber access in a network capable of 
establishing connections with a plurality of services, comprising: 

receivin g, at an access server coupled to a first communication network and a second 
communication network, a communication from a subscriber on said using a first 
communication network coupl e d to a s e cond communication n e twork , said 
communication optionally including a domain identifier associated with a service on a 
network device located on said second communication network; and 

authorizing said subscriber to access [a] only said service on said network device located on 
said second communication network using one of a plurality of virtual circuits, said 
authorizing based upon a domain configuration override attribute associated with the 
virtual circuit used to receive said communication from said subscriber. 

2. (Currently Amended) The method of claim 1 wherein said authorizing further comprises: 
receiving from a memory a virtual circuit profile associated with said virtual circuit; 
assessing said virtual circuit profile to determine if a domain configuration override attribute 

exists within said virtual circuit profile; and 

forcing allowing said subscriber to connect exclusively to a service associated with said 

domain configuration override attribute when said domain configuration override 

attribute exists within said virtual circuit profile. 
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3-6. (Canceled) 

7. (Currently Amended) The method of claim 2 [6] wherein said receiving a virtual circuit 
profile further comprises performing a table lookup based upon a Virtual Path Identifier (VPI) / 
Virtual Channel Identifier (VCI) associated with said virtual circuit. 

8. (Currently Amended) A program storage device readable by a machine, embodying a 
program of instructions executable by the machine to perform a method to control subscriber 
access in a network capable of establishing connections with a plurality of services, the method 
comprising: 

receivin g, at an access server coupled to a first communication network and a second 
communication network, a communication from a subscriber on said using a first 
communication network coupl e d to a s e cond communication network , said 
communication optionally including a domain identifier associated with a service on a 
network device located on said second communication network; and 

authorizing said subscriber to access [a] only said service on said network device located on 
said second communication network using one of a plurality of virtual circuits, said 
authorizing based upon a domain configuration override attribute associated with the 
virtual circuit used to receive said communication from said subscriber. 

9. (Currently Amended) The program storage device of claim 8 wherein said authorizing 
further comprises: 

receiving from a memory a virtual circuit profile associated with said virtual circuit; 
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assessing said virtual circuit profile to determine if a domain configuration override attribute 

exists within said virtual circuit profile; and 
forcing allowing said subscriber to connect exclusively to a service associated with said 

domain configuration override attribute when said domain configuration override 

attribute exists within said virtual circuit profile. 

10-13. (Canceled) 

14. (Currently Amended) The program storage device of claim 9_[13] wherein said receiving 
a virtual circuit profile further comprises performing a table lookup based upon a Virtual Path 
Identifier (VPI) / Virtual Channel Identifier (VCI) associated with said virtual circuit. 

15. (Currently Amended) An apparatus for controlling subscriber access in a network 
capable of establishing connections with a plurality of services, the apparatus comprising: 

means for receivin g, at an access server coupled to a first communication network and a 
second communication network, a communication from a subscriber on said using a 
first communication network coupl e d to a s e cond communication network , said 
communication optionally including a domain identifier associated with a service on a 
network device located on said second communication network; and 

means for authorizing said subscriber to access [a] only said service on said network device 
located on said second communication network using one of a plurality of virtual 
circuits, said authorizing based upon a domain configuration override attribute associated 
with the virtual circuit used to receive said communication from said subscriber. 
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16. (Currently Amended) The apparatus of claim 15 wherein said means for authorizing 
further comprises: 

means for receiving from a memory a virtual circuit profile associated with said virtual 
circuit; 

means for assessing said virtual circuit profile to determine if a domain configuration 

override attribute exists within said virtual circuit profile; and 
means for forcing allowing said subscriber to connect exclusively to a service associated with 

said domain configuration override attribute when said domain configuration override 

attribute exists within said virtual circuit profile. 

17-20. (Canceled) 

21 . (Currently Amended) The apparatus of claim 16_[20] wherein said means for receiving a 
virtual circuit profile further comprises a means for performing a table lookup based upon a 
Virtual Path Identifier (VPI) / Virtual Channel Identifier (VCI) associated with said virtual 
circuit. 
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22. (Currently Amended) An access server capable of forcing subscribers of a first 
communications network coupled to said access server system to gain access exclusively to a 
service located on a network device in a second communications network coupled to said access 
server using a virtual circuit domain n e twork associat e d with a virtual circuit , said access server 
comprising: 

an authorizer capable of granting service authorization to said subscribers based upon a 

virtual circuit used to make a service request; 
a virtual circuit profile request generator capable of generating virtual circuit profile 

requests; 

an assessor capable of assessing said requested virtual circuit profile for a domain 

configuration override attribute; and 
a calculator capable of determining whether the service associated with said virtual circuit 

matches the service associated with said domain configuration override attribute. 

23. (Original) The access server of claim 22, further comprising: 
a receiving interface capable of accepting said service requests; 

a forwarding interface capable of sending said virtual circuit profile requests to a memory 
bank; and 

a second receiving interface capable of accepting requested virtual circuit profiles. 

24. (Original) The access server of claim 22 wherein said service request comprises a Point- 
to-Point Protocol (PPP) session service request. 
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25. (Canceled) 

26. (Canceled) 

27. (Currently Amended) The access server of claim 22 [25] wherein said assessor is capable 
of performing a table lookup based upon a Virtual Path Identifier (VPI) / Virtual Channel 
Identifier (VCI) associated with said virtual circuit. 

28. (Currently Amended) The access server of claim 23 [26] wherein said receiving interface 
comprises at least one access multiplexer, each access multiplexer having a plurality of inputs for 
receiving a service request, each of said inputs being associated with a particular subscriber 
virtual circuit. 

29. (Currently Amended) The access server of claim 23 wherein said memory bank and said 
access server communicate using the Remote Authentication Authorization Dial-In User Service 
(RADIUS) protocol. 
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30. (Currently Amended) An access server capable of forcing subscribers of a first 
communications network coupled to said access server system to gain access exclusively to a 
service located on a network device in a second communications network coupled to said access 
server using a virtual circuit domain n e twork associat e d with a virtual circuit , said access server 
comprising: 

a memory device capable of storing a plurality of virtual circuit profiles, said virtual circuit 

profiles capable of having a domain configuration override attribute associated with 

subscriber authorized services; 
an authorizer capable of granting service authorization to said subscribers based upon a 

virtual circuit used to make a service request; 
a virtual circuit profile request generator capable of generating virtual circuit profile requests; 
an assessor capable of assessing said requested virtual circuit profile for a domain 

configuration override attribute; and 
a calculator capable of determining whether the service associated with said virtual circuit 

matches the service associated with said domain configuration override attribute. 

31. (Currently Amended) The access server of claim 30.29, further comprising; 
a receiving interface capable of accepting said service requests; 

a forwarding interface capable of sending said virtual circuit profile requests to a memory 
bank; and 

a second receiving interface capable of accepting requested virtual circuit profiles. 
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32-34. (Canceled) 

35. (Currently Amended) The access server of claim 30 [33] wherein said assessor is capable 
of performing a table lookup based upon a Virtual Path Identifier (VPI) / Virtual Channel 
Identifier (VCI) associated with said virtual circuit. 

36. (Currently Amended) The access server of claim 31 [34] wherein said receiving interface 
comprises at least one access multiplexer, each access multiplexer having a plurality of inputs for 
receiving a service request, each of said inputs being associated with a particular subscriber 
virtual circuit. 
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